Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File:                     8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier:          qEvkWwFAzOiqojsp3k5UZcWZ+Qt2Hgom6fgJgHVl0MA=
Subject key identifier:   68:72:64:2A:3E:2D:44:67:83:12:AD:5A:BB:02:D9:C6:5B:5C:75:03
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer:       /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial:       019E314E46719A8F9389FD12598388E71EC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number:          0D61
Signing time:             Sat 16 May 2026 15:01:13 +0000
Manifest this update:     Sat 16 May 2026 15:01:13 +0000
Manifest next update:     Sun 17 May 2026 15:01:13 +0000
Files and hashes:         1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: L1hydftJhTMBgI6XQSa0akOwoTtG3Z0uLiHmBeKYhcE=)
                          2: a_bPKr_BRW7-uV28J0kW18UUGgI.roa (hash: ujNW2fJdpnTVC1FhgJD/6p6WEXThSSTIszSadQyIDQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:46:71:9a:8f:93:89:fd:12:59:83:88:e7:1e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
        Validity
            Not Before: May 16 15:01:13 2026 GMT
            Not After : May 17 15:01:13 2026 GMT
        Subject: CN=6872642a3e2d44678312ad5abb02d9c65b5c7503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:47:ab:4e:4e:78:d7:03:f6:63:4f:43:7e:
                    4b:bc:28:fa:e7:ab:6d:9b:a7:ca:ba:23:9a:25:fe:
                    6e:47:5b:9a:6c:a7:e6:4e:28:1a:12:3b:0f:41:3f:
                    34:1f:39:8e:86:cf:0c:32:dd:61:f9:94:0c:ad:7a:
                    fe:54:b1:fd:c3:e1:4a:00:a4:ae:75:ca:a2:a6:36:
                    4c:c0:9c:34:70:2b:ef:5f:ea:e9:aa:de:45:50:09:
                    4d:dc:fe:e0:fd:ce:b9:bd:2e:c2:95:cc:55:06:0e:
                    7d:5d:76:8e:7b:3d:9c:2e:df:98:7a:ac:e3:77:a0:
                    fe:53:56:5e:ab:e7:a7:07:35:d7:7b:3a:b8:bc:3a:
                    04:53:d7:40:8e:a4:43:12:be:2f:6d:bd:1c:69:b4:
                    2a:1b:88:dd:4f:97:97:02:70:15:e6:a1:f1:f4:1c:
                    5a:c6:33:3a:bf:34:29:3b:ef:fc:25:95:46:39:10:
                    e0:d0:93:ea:cf:f0:da:ba:a6:ee:89:c9:4e:e9:ce:
                    20:54:ad:24:3b:e2:ba:88:43:72:c0:4f:8c:31:88:
                    2d:47:34:51:e6:67:f8:83:7c:b4:c1:72:72:0b:37:
                    e6:7a:25:41:96:eb:c1:da:2c:cf:6c:c0:c2:20:2d:
                    da:fb:76:70:f9:f5:9c:d9:73:46:a8:45:7c:d8:15:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:72:64:2A:3E:2D:44:67:83:12:AD:5A:BB:02:D9:C6:5B:5C:75:03
            X509v3 Authority Key Identifier:
                keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3b:fc:91:7e:a3:44:5e:6b:e1:99:8c:53:40:e0:a6:ec:be:
         69:ac:2b:11:73:2c:d7:fe:88:37:9b:c9:20:d8:9b:d9:e9:06:
         39:63:dc:01:ad:e0:28:b0:ad:40:fc:00:fe:58:11:d9:b6:f5:
         7a:4f:24:eb:ee:ff:30:57:1e:0c:c8:88:97:5c:fa:bc:f7:e4:
         e9:a2:b3:b1:79:3b:52:01:49:a2:84:47:ca:b0:7d:7a:d0:8d:
         e4:86:21:49:68:15:d0:b0:9a:7e:e4:84:c2:77:48:25:b8:01:
         4d:f2:48:13:7f:84:93:fd:30:d8:48:c2:ba:9c:68:10:38:c7:
         ab:75:25:f8:2b:8c:ef:f8:cc:40:20:3d:72:ca:82:35:54:01:
         44:e8:87:ff:73:7b:f1:6a:29:f7:81:07:11:56:61:8e:3d:d5:
         26:d8:99:5f:65:96:cf:a6:d4:b4:70:88:b0:91:5f:7c:53:48:
         8a:af:f3:9e:25:20:77:4c:9e:d3:d0:1b:69:35:bf:25:fa:0b:
         ef:bc:77:5f:46:ff:a3:95:31:e7:7e:5c:16:c3:ea:bc:ba:6d:
         23:ce:a2:8d:c8:18:9f:2f:67:b6:a6:ff:2b:52:ae:c5:04:a2:
         e9:a1:ba:bd:7a:5e:32:a6:87:df:56:8a:51:86:98:55:51:56:
         70:2b:17:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTkZxmo+Tif0SWYOI5x7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOGZhMWEyZTQ0OTE4OTFjMTliMGYxMGIwODZmNjU1OTg0
ZjU4NzkwHhcNMjYwNTE2MTUwMTEzWhcNMjYwNTE3MTUwMTEzWjAzMTEwLwYDVQQD
Eyg2ODcyNjQyYTNlMmQ0NDY3ODMxMmFkNWFiYjAyZDljNjViNWM3NTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr5Hq05OeNcD9mNPQ35LvCj656tt
m6fKuiOaJf5uR1uabKfmTigaEjsPQT80HzmOhs8MMt1h+ZQMrXr+VLH9w+FKAKSu
dcqipjZMwJw0cCvvX+rpqt5FUAlN3P7g/c65vS7ClcxVBg59XXaOez2cLt+Yeqzj
d6D+U1Zeq+enBzXXezq4vDoEU9dAjqRDEr4vbb0cabQqG4jdT5eXAnAV5qHx9Bxa
xjM6vzQpO+/8JZVGORDg0JPqz/DauqbuiclO6c4gVK0kO+K6iENywE+MMYgtRzRR
5mf4g3y0wXJyCzfmeiVBluvB2izPbMDCIC3a+3Zw+fWc2XNGqEV82BVikwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhyZCo+LURngxKtWrsC2cZbXHUDMB8GA1UdIwQY
MBaAFPKPoaLkSRiRwZsPELCG9lWYT1h5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmJmYWMtMDc4MC00YmJkLWJjYTIt
MzRhMTRhMmJiNDAxLzEvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84YmJmYWMtMDc4MC00YmJkLWJjYTItMzRhMTRhMmJiNDAx
LzEvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzv8kX6j
RF5r4ZmMU0Dgpuy+aawrEXMs1/6IN5vJINib2ekGOWPcAa3gKLCtQPwA/lgR2bb1
ek8k6+7/MFceDMiIl1z6vPfk6aKzsXk7UgFJooRHyrB9etCN5IYhSWgV0LCafuSE
wndIJbgBTfJIE3+Ek/0w2EjCupxoEDjHq3Ul+CuM7/jMQCA9csqCNVQBROiH/3N7
8Wop94EHEVZhjj3VJtiZX2WWz6bUtHCIsJFffFNIiq/zniUgd0ye09AbaTW/JfoL
77x3X0b/o5Ux535cFsPqvLptI86ijcgYny9ntqb/K1KuxQSi6aG6vXpeMqaH31aK
UYaYVVFWcCsXNA==
-----END CERTIFICATE-----
Generated at Sat May 16 19:29:50 2026 by rpki-client